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Amendments to the Claims: 

The following Listing of Claims replaces all prior listings, and versions, of claims in the 
present application. 

Listing of Claims: 

1 . (Previously presented) A method for authorizing, authenticating and accounting users 
having transparent access to a destination network, wherein the users otherwise have access to a 
home network through home network settings resident on the user's computers, and wherein the 
users can access the destination network without altering the home network settings, comprising: 

receiving at a gateway device a request from a user for access to the destination 

network; 

identifying an attribute associated with the user based upon a packet received by 
the gateway device, wherein the attribute comprises an indication of the location comprising a 
port, circuit ID, VLAN ID or MAC address from which the request was received that is 
determined based on the received packet, wherein the packet is transmitted from the user's 
computer, wherein the user's computer remains configured for accessing the home network, and 
wherein no additional configuration software need be installed on the user's computer to access 
the destination network and any other network; 

accessing a user profile corresponding to the user and stored in a user profile 
database, where the user profile is accessed based upon the attribute associated with the user; and 

determining if the user is entitled to access the destination network based upon 
both the user profile and the indication of the location comprising the port, circuit ID, VLAN ID 
or MAC address from which the request was received. 

2. (Canceled) 

3. (Original) The method of claim 1, further comprising updating the user database when 
a new user accesses the destination network. 
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4. (Original) The method of claim 1, further comprising maintaining in the user profile a 
historical log of the user's access to the destination network. 

5. (Canceled) 

6. (Original) The method of claim 1, wherein receiving at the gateway device a request 
from a user for access comprises the step of receiving an Internet destination address from the 
user. 

7. (Original) The method of claim 1, wherein determining if the user is entitled to access 
the destination network further comprises denying the user access where the user profile 
indicates that the user is denied access. 

8. (Original) The method of claim 1, wherein determining if the user is entitled to access 
the destination network further comprises directing the user to a login page where the user 
profile is not located within the user profile database. 

9. (Currently amended) A system for authorizing, authenticating and accounting users 
having transparent access to a destination network, wherein the users otherwise have access to a 
home network through home network settings resident on the user's computers, and wherein the 
users can access the destination network without altering the home network settings, comprising: 

a gateway device for receiving a request from a user for access to the destination 
network; 

means for identifying an attribute associated with the user based upon a packet received 
by the gateway device, wherein the attribute comprises an indication of the location comprising a 
port, circuit ID, VLAN ID or MAC address from which the request was received that is 
determined based on the received packet, wherein the packet is transmitted from the user's 
computer, wherein the user's computer is configured for accessing the home network, and 
wherein no additional configuration software need be installed on the user's computer in order 
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for the user to access the destination network and any other network; 

a user profile database comprising stored access information and in communication with 
the gateway device, and wherein access information corresponding to the user is identified by the 
attribute associated with the user, and 

an Authentication, Authorization and Accounting (AAA) server in communication with 
the gateway device and user profile database, where the AAA server determines if the user is 
entitled to access the destination network based upon the access information stored within the 
user profile database and based upon the indication of the location comprising the port, circuit 
ID, VLAN ID or MAC address from which the request was received. 

10. (Canceled) 

1 1 . (Original) The system of claim 9, wherein the means for identifying comprises an 
access concentrator in communication with the gateway device. 

12. (Original) The system of claim 9, wherein the AAA server is located within the 
gateway device. 

13. (Original) The system of claim 9, wherein the user profile database includes a 
plurality of user profiles, wherein each respective user profile of the plurality of user profiles 
contains access information. 

14. (Original) The system of claim 12, wherein the user profile database is located within 
the AAA server. 

15. (Original) The system of claim 13, wherein each respective user profile contains 
historical data relating to the duration of destination network access for use in determining the 
charges due for the destination network access. 
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16. (Previously presented) The method of claim 1, further comprising determining 
authentication requirements for the received packet based on information within the received 
packet, 

wherein determining if the user is entitled to access the destination network further 
comprises basing the determination also on the determined authentication requirements. 

17. (Previously presented) The system of claim 9, wherein the AAA server determines 
authentication requirements for the received packet based on information within the received 
packet and determines if the user is entitled to access the destination network based upon the 
access information stored within the user profile database, the determined authentication 
requirements and the indication of the location. 

18. (Previously presented) A method for authorizing, authenticating and accounting users 
having transparent access to a destination network, wherein the users otherwise have access to a 
home network through home network settings resident on the user's computers, and wherein the 
users can access the destination network without altering the home network settings, comprising: 

receiving at a gateway device a request from a user for access to the destination 

network; 

identifying an attribute associated with the user based upon a packet received by 
the gateway device, wherein the attribute comprises an indication of the location comprising a 
port, circuit ID, VLAN ID or MAC address from which the request was received that is 
determined based on the received packet, wherein the packet is transmitted from the user's 
computer, wherein the user's computer remains configured for accessing the home network, and 
wherein no additional configuration software need be installed on the user's computer to access 
the destination network and any other network; 

determining authentication requirements for the received packet based on 
information within the received packet; 

accessing a user profile corresponding to the user and stored in a user profile 
database, where the user profile is accessed based upon the attribute associated with the user; and 
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determining if the user is entitled to access the destination network based upon 
each of the user profile, the determined authentication requirements for the received packet and 
the indication of the location comprising the port, circuit ID, VLAN ID or MAC address from 
which the request was received. 

1 9. (New) The method of claim 1 , wherein identifying the attribute further comprises 
determining the location based on a combination of two or more of the port, the circuit ID, the 
VLAN ID, and the MAC address. 

20. (New) The method of claim 1 , wherein determining if the user is entitled to access the 
destination network is also based upon dynamic information determined by a provider of the 
destination network. 

21. (New) The system of claim 9, wherein the attribute is a combination of two or more 
of the port, the circuit ID, the VLAN ID, and the MAC address. 

22. (New) The system of claim 9, wherein the user accessing the destination network is 
also based on dynamic information determined by a provider of the destination network. 

23. (New) The method of claim 18, wherein identifying the attribute further comprises 
determining the location based on a combination of two or more of the port, the circuit ID, the 
VLAN ID, and the MAC address. 

24. (New) The method of claim 18, wherein determining if the user is entitled to access 
the destination network is also based upon dynamic information determined by a provider of the 
destination network. 
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